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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1. (Previously Presented) An audit system comprising: 
a storage component configured to store: 

a set of business processes describing the operations of an enterprise, each 
business process including one or more business functions, each business function being 
assigned to one or more employees in a set of employees; and 

a compatibility registry including a set of business function 
incompatibilities, each business function incompatibility identifying at least two business 
functions that should not be simultaneously assigned to a single employee; and 

at least one processing component in communication with the storage component, 
the at least one processing component being configured to: 

compare at least one business function incompatibility in the compatibility 
registry with the business functions assigned to each employee in the set of employees; and 

create a report identifying at least one employee in the set of employees 
that is simultaneously assigned to business functions that are identified as incompatible as per the 
at least one business function incompatibility. 

2. (Canceled) 

3. (Previously Presented) The audit system of Claim 1, wherein the report 
further includes an identification of the at least one business function incompatibility. 

4. (Previously Presented) The audit system of Claim 1, wherein the at least 
one processing component is further configured to run a set of workflow-enabled applications 
having a set of functions adapted to implement the set of business processes, such that an 
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assignment of business functions to an employee in the set of employees enables the employee to 
access corresponding functions in the set of functions that implement said business functions. 

5. (Previously Presented) The audit system of Claim 1, wherein the storage 
component is further configured to store a business process library having a plurality of business 
processes, wherein the set of business processes is a subset of the plurality of business processes 
of the business process library. 

6. (Previously Presented) The audit system of Claim 5, wherein the business 
process library includes a plurality of business function incompatibilities corresponding to at 
least a portion of the plurality of business processes, each business function incompatibility 
identifying at least two business functions that should not be simultaneously assigned to a single 
employee. 

7. (Previously Presented) The audit system of Claim 6, wherein the at least 
one processing component is further configured to receive a selection from an auditor of a 
business process from the business process library and, in response to the selection, add the 
selected business process to the set of business processes describing the operations of the 
enterprise and add at least one business function incompatibility to the compatibility registry. 

8. (Previously Presented) The audit system of Claim 1, wherein an employee 
in the set of employees is assigned to a new business function, and wherein the at least one 
processing component is further configured to create an alert in response to the new business 
function matching at least one business function incompatibility. 

9. (Previously Presented) The audit system of Claim 8, wherein the alert is 
communicated to an auditor. 

10. (Previously Presented) The audit system of Claim 8, wherein the alert 
includes an identification of the employee assigned to the new business function. 
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1 1 . (Previously Presented) The audit system of Claim 8, wherein the alert 
includes an identification of the at least one business function incompatibility matching the new 
business function. 

12. (Previously Presented) The audit system of claim 8, wherein the at least 
one processing component is further configured to prevent the assignment of another new 
business function to the employee in response to the new business function matching the at least 
one business function incompatibility. 

13. (New) An audit system for an enterprise, the audit system comprising: 
a storage component configured to store: 

a business process library comprising a plurality of business processes, 
each business process including one or more business functions, each business function being 
associated with a list of one or more other business functions that are incompatible with said 
each business function; 

a set of business processes describing the operations of the enterprise; and 

a business function compatibility registry for the enterprise; and 
at least one processing component in communication with the storage component, 
the at least one processing component being configured to: 

receive, from an auditor, a selection of a business process from the 
business process library; 

add the selected business process to the set of business processes 
describing the operations of the enterprise; and 

add a business function included in the selected business process and its 
associated list of incompatible business functions to the business function compatibility registry. 

14. (New) The audit system of claim 13 wherein at least one business process 
in the business process library includes a parent business function and a child business function, 
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and wherein the child business function inherits the list of incompatible business functions 
associated with the parent business function. 
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